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SYSTEM AND METHOD FOR MANAGING MULTIMEDIA CONTENTS 

IN INTRANET 

BACKGROUND OF THE INVENTION 
[01] This application claims the priority of Korean Patent Application No. 
10-2003-0004795, filed on January 24, 2003, in the Korean Intellectual 
Property Office, the disclosure of which is incorporated herein in its entirety 
by reference. 

Field of the Invention 
[02] The present invention relates generally to a system and method for 
managing multimedia contents in an intranet (for example, a private 
information network including a home network or office network) including a 
plurality of clients (for example, personal computers or wired/wireless digital 
information appliances), and more particularly to a system and method for 
managing non-free multimedia contents in an intranet. 

Description of the Related Art 
[03] Generally, an intranet, such as a home network system or an office 
network system, includes a server capable of performing Internet 
communications, and allows a network to be constructed between a plurality 
of clients, such as personal computers (PCs) or wired/wireless digital 
information appliances (for example, refrigerators, air conditioners, televisions 
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(TVs), Personal Digital Assistants (PDAs) or the like), thus enabling 
integrative control and management to be realized. 

[04] Recently, with the rapid development of computers, the Internet, 
storage media and the like, various documents and contents are produced and 
distributed in the form of digital data readable by computers. However, due to 
the characteristics of these digital contents, the reproductions or modified 
versions of an original can be easily made and distributed. Therefore, since a 
writer of digital contents invests a lot of money, time and creative power, the 
writer desires to thoroughly protect his or her copyright whether on-line or off- 
line. However, illegal reproduction and distribution of such copyrighted 
digital contents due to the easily reproducible and distributable properties 
thereof is a major obstacle to the growth of digital content markets. 
[05] A streaming method is one method proposed to solve the above 
problem of illegal reproduction and distribution of digital contents. The 
streaming method enables data to be temporarily stored in a Random Access 
Memory (RAM), and not in a hard disk of a user. However, this method is 
disadvantageous in that the discontinuity, buffering and undesired mixing of 
moving pictures frequently occurs due to technical problems, such as 
communication speed or compression. Further, a program called a Hinet 
Recorder developed by Hoonnet Co., Ltd. of Korea in July 2001 allows 
Internet movies, Internet broadcasting and music, moving picture lectures, 
music videos and the like, which are always provided by the streaming method, 
to be downloaded simultaneously with streaming. This demonstrates that a 



digital content service, provided by the streaming method, is unable to prevent 
illegal reproduction. 

[06] Therefore, in order to protect copyrights on digital contents, interest in 
Digital Rights Management (DRM) systems has recently increased. Such a 
DRM system is based on a technique for protecting various digital contents, 
such as texts, music files, images, pictures, moving picture lectures, movies, 
software and games, which have been distributed through various channels, 
against illegal reproduction, and enabling a non-free content service to be 
continuously provided. Recently, interest in the DRM system has greatly 
increased due to the judgment of service discontinuance against Napster, 
which is a free music download Web site originated in the United States, and a 
lawsuit of the property right council against Soribada, which is a Korean 
Napster-like Web site. Further, after much research and development and 
commercialization, the DRM system has progressed as the only solution 
capable of solving this copyright infringement argument. Therefore, if a 
content provider introduces the DRM system, digital contents distributed 
through all networks can be opened only when rules and use policies decided 
by the content provider are satisfied. Further, even though illegal reproduction 
is attempted, since all digital contents are encrypted, users who are not paying 
a certain fee cannot open illegally reproduced files. 

[07] The construction of this conventional DRM system is described with 
reference to the attached drawings. 
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[08] Fig. 1 is a block diagram showing the entire construction of the 
conventional DRM system, and Fig. 2 is a block diagram showing the 
construction of a conventional DRM server group and a conventional DRM 
client for exclusive use of the DRM server group (hereinafter referred to as 
'DRM-only client'). 

[09] As shown in FIG. 1, the conventional DRM system is implemented on 
the basis of a server-client system in the Internet environment, and comprises 
a DRM server group 100 comprised of a content provider 110, a distributor 
120 and a clearing house 130, and a DRM-only client 200 subordinate to the 
DRM server group 100. 

[10] In this case, the content provider 110 carries out the writing of 
multimedia contents and packaging process of contents and metadata, and 
provides the packaging-processed content package to the distributor 120. The 
distributor 120 provides the content package received from the content 
provider 110 to an authenticated user in the form of a package combined with 
an encrypted license, or a package separate from the encrypted license. At this 
time, the clearing house 130 checks both billing information and content usage 
details on the basis of content usage details received from the distributor 120 
in connection with a billing system (not shown) and reports the checked 
results to the content provider 1 10. 

[11] The conventional DRM server group 100 uses a unique DRM solution 
at a multimedia content generating and distributing step and a billing 
information and usage details managing step. 



[12] That is, the content provider 110 processes multimedia contents and 
unique usage/business rules together with metadata using a corresponding 
DRM solution to generate a unique content package. 

[13] Further, contents distribution is performed by allowing the distributor 
120 to transfer a content package protected by unique encryption/decryption 
techniques, Public Key Infrastructure (PKI)/key management system and the 
like to a user system. At this time, multimedia contents and authority 
information (license) are defined in the form of a combined package or 
separate packages depending on the service policies of the DRM server group 
100. 

[14] Therefore, when a DRM application 210 of desired multimedia 
contents for the DRM server group 100 is executed, it is certified that a client 
is the DRM-only client 200, as shown in Fig. 2. Further, a unique player 220 
and a corresponding DRM agent plug-in 230, to which the multimedia 
contents packaging techniques, the encryption/decryption techniques and the 
key management system intended by the DRM server group 100 can be 
applied, must be installed. If the DRM agent plug-in 230 and the unique 
player 220 which are compatible with each other do not exist in the system, a 
corresponding service must be carried out after the DRM agent plug-in or the 
unique player is newly installed. 

[15] That is, in order to use contents, a user system checks whether a DRM- 
only client 200 for a corresponding DRM solution has been installed through 
the DRM application 210 linked to the content package received from the 
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distributor 120. The DRM agent plug-in 230 of the DRM-only client 200 
controls the player 220 to allow the user to use multimedia contents with 
authority after the user is authenticated and authority information for 
multimedia contents is applied in a plug-in manner. If the DRM agent plug-in 
230 providing compatibility is not installed, the DRM server group 100 
informs the user of an address of a Web site from which a DRM agent plug-in 
and a player can be downloaded, thus enabling the DRM agent plug-in to be 
installed in the user system. 

[16] Consequently, most DRM solutions used in DRM server groups 100 
support multimedia contents, authority information protection techniques and 
the like on the basis of the unique DRM agent plug-ins 230, as shown in Fig. 2, 
and some DRM solutions share information of the DRM agent plug-ins 230. 
[17] Therefore, in order to use a non-free multimedia content service in 
wired/wireless digital information appliances constituting a private 
information network, such as a home network or office network, the DRM- 
only client 200 subordinate to the DRM server group 100 must be used. 
Further, as shown in Fig. 2, if various multimedia content services processed 
by various companies are required to be used in a single appliance, a plurality 
of DRM-only clients corresponding to respective DRM server groups 100 
must be installed to allow all of the content services to be performed. 
[18] For example, if a DRM application provided by Microsoft Corporation 
is required to be used in a user system in which only a DRM solution provided 
by RealPlayer Corporation is installed, the user must additionally install 



Windows Media Player and Windows Media Rights Manager (WMRM). 
Therefore, the user system would include a plurality of DRM support players 
220 and DRM agent plug-ins 230. 

[19] However, the construction of the conventional DRM system for 
wired/wireless digital information appliances has certain problems, as 
described below. 

[20] First, if services for various multimedia contents processed by a 
plurality of companies are required to be used in clients belonging to an 
intranet, unique DRM-only agents and players for DRM solutions 
corresponding to respective DRM server groups must be installed in each of 
the clients, thus unnecessarily consuming resources and processing time. 
[21] Second, as compared to a conventional Internet-based computing 
environment, since wired/wireless digital information appliances (for example, 
refrigerators, air conditioners, TVs, PDSs and the like) have limited 
computing abilities and limited compatibilities with various multimedia DRM 
service protocols relative to a PC or the like, it is difficult to apply the 
conventional DRM system to the intranet in which these wired/wireless digital 
information appliances are clients. 

[22] Third, in the case of the intranet in which a client turnover rate 
according to the participation/withdrawal of clients is high, for example, in 
which the clients are wireless digital information appliances, since the 
participation of the wireless digital information appliances and the withdrawal 
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thereof due to the movement of users frequently occurs, it is difficult to 
flexibly manage the intranet using the conventional DRM system. 

SUMMARY 

[23] Accordingly, the present invention has been made keeping in mind the 
above problems occurring in the prior art, and an aspect of the present 
invention is to provide a system and method for managing multimedia 
contents, in which there is no need to install DRM-only agents and players 
according to DRM server groups in each of clients in an intranet including a 
plurality of clients to use contents provided by DRM server groups. 
[24] Another aspect of the present invention is to provide a system and 
method of managing multimedia contents, which is suitable for an intranet 
including clients having limited computing abilities and limited compatibihties 
with various DRM service protocols. 

[25] A further aspect of the present invention is to provide a system and 
method for managing multimedia contents suitable for the intranet in which 
frequent participation/withdrawal of clients occurs. 

[26] Additional aspects and advantages of the invention will be set forth in 
part in the description which follows and, in part, will be obvious from the 
description, or may be leamed by practice of the invention. 
[27] In order to accomplish the above aspects, the present invention 
provides a system for managing multimedia contents in an intranet, 
comprising a server for converting multimedia contents received through the 
Internet into multimedia contents having a format suitable for at least one 
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client of the intranet and transmitting the converted multimedia contents to the 
client. 

[28] Consistent with the present invention, the server may translate a 
license received through the Internet to be suitable for the client of the intranet 
and additionally transmit the translated license to the client. Consistent with 
the present invention, the converted multimedia contents or the translated 
license are encrypted and transmitted to the client. In this case, the encryption 
may be performed using a group key of the server. 

[29] Consistent with the present invention, the server may comprise a 
plurality of proxy managers constructed according to DRM server groups, the 
proxy managers each comprising a platform authentication unit for requesting 
a license for multimedia contents from a corresponding DRM server group 
which provides the multimedia contents, and performing registration of the 
client; a content conversion unit for decrypting multimedia contents received 
from the corresponding DRM server group, and converting the decrypted 
multimedia contents into multimedia contents having a format suitable for the 
client; and a license translation unit for translating a license received from the 
corresponding DRM server group into a license having a format suitable for 
the cHent. 

[30] Consistent with the present invention, the proxy manager may further 
comprise a report/billing unit for arranging multimedia content usage details 
of the client, transmitting the arranged multimedia content usage details to the 
DRM server group, and transmitting information relating to billing. 
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[31] In addition, the present invention provides a system for managing 
multimedia contents in an intranet, comprising at least one client for receiving 
and executing multimedia contents, converted by a server of the intranet into 
multimedia contents having a format suitable for the client of the intranet. 
[32] Consistent with the present invention, the client may additionally 
receive a license translated to be suitable for the client of the intranet by the 
server. Consistent with the present invention, the multimedia contents 
converted by the server or the license translated by the server are encrypted 
and transmitted to the client. In this case, the encryption may be performed 
using a group key of the server. 

[33] Consistent with the present invention, the client may comprise an 
authentication and access control unit for performing registration of the client 
on the server and access to the server; a content decryption unit for decrypting 
the multimedia contents which are encrypted and transmitted; and a rights 
management unit for decrypting the license which is encrypted and transmitted, 
and checking whether the decrypted multimedia contents are executed in the 
client to be suitable for the decrypted license. 

[34] Consistent with the present invention, if the multimedia contents 
converted by the server or the license translated by the server are encrypted 
using the group key of the server and transmitted to the client, the decryption 
performed by the client may be carried out using a client key corresponding to 
the group key of the server. 
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[35] Consistent with the present invention, the chent may further comprise 
a report unit for transmitting usage details of the transmitted multimedia 
contents to the server so as to report the multimedia content usage details to 
the server. 

[36] In addition, the present invention provides a method of managing 
multimedia contents in an intranet, comprising converting multimedia contents 
received through the Internet into multimedia contents having a format 
suitable for at least one client of the intranet and transmitting the converted 
multimedia contents to the client by a server of the intranet. 
[37] Consistent with the present invention, the multimedia content 
management method may further comprise translating a license received 
through the Internet to be suitable for the client of the intranet and transmitting 
the translated license to the client by the server. Consistent with the present 
invention, the multimedia content management method may further comprise 
encrypting the converted multimedia contents or the translated license. In this 
case, the encryption of the converted multimedia contents or the translated 
license may be performed using a group key of the server. 
[38] Consistent with the present invention, the multimedia content 
management method may further comprise receiving multimedia content 
usage details of the client by the server; and arranging the multimedia content 
usage details of the client and transmitting the arranged multimedia content 
usage details to a DRM server group so as to report multimedia content usage 
details of the client in the intranet to the DRM server group. 
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[39] Consistent with the present invention, information relating to bilhng 
as well as the multimedia content usage details may also be transmitted to the 
DRM server group. 

[40] In addition, the present invention provides a method of managing 
multimedia contents in an intranet, comprising receiving and executing 
multimedia contents, converted by a server of the intranet into multimedia 
contents having a format suitable for at least one client of the intranet, by the 
client. 

[41] Consistent with the present invention, the multimedia content 
management method may further comprise receiving a license translated to be 
suitable for the client of the intranet by the server. Consistent with the present 
invention, the multimedia contents converted by the server or the license 
translated by the server are encrypted and transmitted to the client. In this 
case, the encryption of the converted multimedia contents or the translated 
license may be performed using a group key of the server. 
[42] Consistent with the present invention, if the converted multimedia 
contents or the translated license are encrypted using the group key of the 
server and transmitted to the client, the decryption performed by the client 
may be carried out using a client key corresponding to the group key of the 
server. 

[43] Consistent with the present invention, the multimedia content 
management method may further comprise decrypting the encrypted 
multimedia contents; decrypting the encrypted license; and checking whether 
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the decrypted multimedia contents are executed in the chent to be suitable for 
the decrypted license. 

[44] Consistent with the present invention, the multimedia content 
management method may further comprise transmitting usage details of the 
transmitted multimedia contents to the server so as to report the multimedia 
content usage details of the client in the intranet to the server. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[45] The above and other aspects, features and other advantages of the 
present invention will be more clearly understood from the following detailed 
description taken in conjunction with the accompanying drawings, in which: 
[46] Fig. 1 is a block diagram showing the entire construction of a 
conventional DRM system; 

[47] Fig. 2 is a block diagram showing the construction of a conventional 

DRM server group and a conventional DRM-only client; 

[48] Fig. 3 is a block diagram showing the construction of a system for 

managing multimedia contents according to the present invention; 

[49] Fig. 4 is a block diagram showing the detailed construction of a proxy 

manager according to the present invention; 

[50] Fig. 5 is a block diagram showing the detailed construction of a DRM 
smart client according to the present invention; 

[51] Fig. 6 is a view showing a key management method for dynamic group 
communication according to the present invention; 
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[52] Fig. 7 is a flowchart showing an operation between the DRM server 
group and the proxy manager according to the present invention; and 
[53] Fig. 8 is a flowchart showing an operation between the proxy manager 
and the DRM smart client according to the present invention. 

DESCRIPTION OF THE EXEMPLARY EMBODIMENTS 
[54] In the present invention, an intranet includes networks, such as a home 
network or office network, having a server capable of performing Internet 
communications and a plurality of clients, and includes wired and wireless 
networks. 

[55] Further, the server of the intranet of the present invention is a concept 
including all devices, such as media centers, set-top boxes or PCs, having 
computing abilities capable of converting or encrypting predetermined 
multimedia contents and translating or encrypting predetermined electronic 
licenses. 

[56] Further, the client of the intranet of the present invention is a concept 
including all devices capable of executing predetermined multimedia contents, 
such as PCs or wired/wireless digital information appliances (for example, 
refrigerators, air conditioners, TVs, PDAs or the like). 

[57] Hereinafter, embodiments of a system and method for managing 
multimedia contents in an intranet according to the present invention as 
characterized above will be described in detail with reference to the attached 
drawings. 
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[58] For convenience of description, embodiments of a multimedia content 
management system in an intranet according to the present invention will be 
described on the basis of a private information network including a home 
network or office network in which PCs or wired/wireless digital information 
appliances are clients. However, it should be noted that the intranet of the 
present invention is not limited to the private information network. 
[59] Fig. 3 is a block diagram showing the construction of a system for 
managing multimedia contents according to the present invention. 
[60] As shown in Fig. 3, the multimedia content management system of the 
present invention comprises proxy managers 300 provided in a server for 
performing a service connection to an external network in a private 
information network comprised of wired/wireless digital information 
appliances, that is, a media center or set-top box, and DRM smart clients 400 
provided in clients. The clients can be implemented by wired/wireless digital 
information appliances, such as electrical home appliances, Web pads, PDAs 
or digital TVs, and the participation and withdrawal of the DRM smart clients 
400 in/from the private information network can be controlled by registration 
on the proxy managers 300. 

[61] That is, each of the proxy managers 300 in the media center or set- top 
box is a main component for representing a private information network with 
respect to a certain DRM server group n 100 of a conventional Internet-based 
non-free multimedia content distribution network, and performs 
communication relating to services with the DRM server group n 100 as a 
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DRM-only client by generating a proxy according to a unique DRM solution 
of each of the DRM server groups 100. 

[62] Therefore, the DRM server group n 100 performs the same protocol as 
the conventional non-free multimedia content service together with the proxy 
manager 300 representing the clients of the private information network, that 
is, wired/wireless digital information appliances. Thereafter, the proxy 
manager 300 converts corresponding contents and authority information into a 
format acceptable by the DRM smart client 400 of each of the clients. 
[63] In the multimedia content management system of the present invention, 
since the proxy manager 300 in the media center or set-top box is provided 
with respect to each DRM server group n 100 having a unique DRM solution, 
a plurality of proxy managers 300 #1 to #N are created in a single media 
center or set-top box to use DRM server group n 100. Each of the proxy 
managers 300 is operated as a main component for representing the private 
information network with respect to each DRM server group n 100 having a 
unique DRM solution. 

[64] The operations of the proxy manager 300 and the DRM smart client 
400 are described in brief. A proxy manager n 300 operating as a main 
component representing the private information network with respect to a 
certain DRM server group n 100 exists. The proxy manager n 300 converts 
encrypted multimedia contents received from the certain DRM server group n 
100 into multimedia contents having a format suitable for clients existing in 
the private information network, translates a license, which is encrypted and 
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transmitted, to be suitable for the clients, and transmits the converted 
multimedia contents and translated license to respective clients. Consistent 
with the present invention, the converted multimedia contents may be single- 
format contents (for example. Moving Picture Experts Group (MPEG), etc.) 
previously designated in the private information network. In this case, each of 
the clients may include only a single player. Further, the translated license can 
be a license, authority of which (for example, the number of uses, use time, 
etc.) is translated to be suitable for the clients registered on the private 
information network, for example, electrical home appliances, Web pads, 
PDAs, and digital TVs. 

[65] The converted multimedia contents and the translated license are 
transmitted to the clients registered on the private information network and 
executed by the DRM smart clients 400 provided in respective clients. Usage 
details of contents used by the DRM smart clients 400 are transmitted again to 
the proxy manager n 300 in the media center or set-top box. The proxy 
manager n 300 arranges content usage details of respective clients of the 
private information network and reports the arranged content usage details to 
the DRM server group n 100 as a main component representing the private 
information network with respect to the DRM server group n 100 . 
[66] By the above-described system, each of the clients of the private 
information network includes a single DRM smart client 400 which can use a 
number of multimedia contents regardless of each DRM server group n 100 
having a unique DRM solution. Further, in the case where multimedia 
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contents transmitted in various formats are converted into single-format 
contents (for example, MPEG format) by the proxy manager 300, since each 
of the clients need include only a player for executing single-format contents, 
the above system is useful for a private information network comprised of 
clients having limited computing abilities. 

[67] Further, even in the case of a private information network comprised of 
clients having sufficient computing abilities, it is only necessary to vary a 
proxy manager 300 in the media center or set-top box when a variation, such 
as the addition or deletion of an external DRM server group n 100, occurs, 
thus increasing management efficiency for a network. 

[68] Hereinafter, the construction of each of the proxy managers 300 is 
described in detail with reference to Fig. 4. 

[69] The proxy manager 300 of the present invention is comprised of a 
platform authentication unit 310, a content conversion unit 320 and a license 
translation unit 330. 

[70] The platform authentication unit 310 performs initialization for 
services with the DRM server group 100 as a main component representing 
the private information network, and requests a license for multimedia 
contents suitable for the private information network from the DRM server 
group 100. Further, the platform authentication unit 310 performs the 
registration of clients constituting the private information network, that is, 
wired/wireless digital information appliances, and the management of 
certificates and encryption keys. 
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[71] The content conversion unit 320 decrypts multimedia contents received 
from the DRM server group, and converts the decrypted multimedia contents 
into multimedia contents having a predetermined format. As described above, 
the converted multimedia contents can be single-format contents (for example, 
MPEG) previously designated in the private information network. 
[72] Meanwhile, the converted multimedia contents may be encrypted in a 
suitable format by the content conversion unit 320 and transmitted to each of 
the DRM smart clients 400. In order to perform the encryption, an encryption 
technique, for example, a Public Key Infrastructure (PKI) technique, can be 
used. In this case, the platform authentication unit 310 generates certificates 
for authenticating wired/wireless digital information appliances and 
encryption keys, and manages the certificates and the encryption keys. 
[73] The license translation unit 330 translates authority information 
defined in the DRM server group, that is, a license, in the format suitable for 
respective DRM smart clients 400 of registered wired/wireless digital 
information appliances. As described above, the translated license can be a 
license, the authority of which (for example, the number of uses, use time, etc.) 
is translated to be suitable for the clients registered in the private information 
network, for example, electrical home appliances, Web pads, PDAs and digital 
TVs. The license can be encrypted in a suitable format and then transmitted to 
each of the DRM smart clients 400, similar to the multimedia contents. 
Further, similar to the converted multimedia contents, an encryption technique, 
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for example. Public Key Infrastructure (PKI), can be used so as to perform the 
encryption. 

[74] Meanwhile, although not shown in Fig. 4, the system may further 
comprise a report/billing unit which arranges multimedia content usage details 
of the clients of the private information network after receiving the multimedia 
content usage details, transmits the arranged multimedia content usage details 
to the DRM server group 100, and further transmits information relating to 
billing thereto. 

[75] Hereinafter, the construction of each of the DRM smart clients 400 is 
described in detail with reference to Fig. 5. 

[76] The DRM smart client 400 in the wired/wireless digital information 
appliance is a single DRM-only client provided in a client, and is able to 
operate independently of the DRM solutions of the DRM server groups 100. 
The participation and withdrawal of the clients in and from the private 
information network is controlled by the registration on the platform 
authentication unit 310 of the proxy manager 300. 

[77] The DRM smart client 400 comprises an authentication and access 
control unit 410, a content decryption unit 420 and a rights management unit 
430. 

[78] The authentication and access control unit 410 performs the 
registration of clients on the private information network, the storage of 
certificates for authentication of the clients, and the access of the clients to the 
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private information network in communication with the platform 
authentication unit 310 of the proxy manager 300. 

[79] If the multimedia contents are encrypted in a suitable format and then 
transmitted, for example, if an encryption technique, such as the PKI, is 
applied, the content decryption unit 420 decrypts and executes the multimedia 
contents encrypted by the proxy manager 300 through a certificate received 
from the proxy manager 300 after registration. An encryption method and a 
key management method on the intranet, proposed in the multimedia content 
management system and method in an intranet according to the present 
invention, will be described in detail later with reference to Fig. 6. Therefore, 
the description thereof is omitted here. 

[80] If the translated license is encrypted using a predetermined encryption 
method and then transmitted to the DRM smart client 400, for example, if an 
encryption technique, such as the PKI, is applied, the rights management unit 
430 decrypts the encrypted license through a certificate received from the 
proxy manager 300 after registration, and supports the control of the proxy 
manager 300 by checking whether the multimedia contents are executed to be 
suitable for the decrypted license. 

[81] Meanwhile, although not shown in Fig. 5, the system may further 
comprise a report/billing unit which transmits multimedia content usage 
details of cHents on the private information network to the proxy manager 300 
so as to report the content usage details. 
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[82] Fig. 6 is a view showing an encryption method and a key management 
method in an intranet proposed in the multimedia content management system 
and method in an intranet according to the present invention, especially 
showing a dynamic key management method for dynamic group 
communication. 

[83] Such a dynamic key management method provides a method capable 
of stably managing multimedia contents and license regardless of the 
participation and withdrawal of clients under a network environment in which 
the clients of the private information network, for example, wireless 
appliances, frequently participate in the private information network or 
withdraw therefrom. 

[84] Hereinafter, the dynamic key management method is described in 
detail with reference to Fig. 6. 

[85] If an encryption technique using the PKI is used, the platform 
authentication unit 310 of the proxy manager 300, which generates and 
manages certificates for authenticating wired/ wireless digital information 
appliances and encryption keys, manages the registration of the clients and the 

issue of certificates of the appliances by monitoring participation and 

I 

withdrawal states of the clients at any time with the movability of the clients 
taken into consideration, and broadcasts the monitored results to the DRM 
smart clients 400 by reflecting the monitored results on management policies 
for a group key 350. 
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[86] At this time, client keys 440 (kl to km) are assigned to registered 
DRM smart clients 400 through the platform authentication unit 310 of the 
proxy manager 300. 

[87] The client keys 440 (kl to km) are used to decrypt multimedia contents 
and a license, wherein the multimedia contents are obtained by the proxy 
manager 300 decrypting encrypted multimedia contents received from the 
DRM server group 100 using a content service session key 340 (kc), re- 
encrypting the decrypted multimedia contents using a group key 350 (kg) of 
the proxy manager 300 and then transmitting the re-encrypted multimedia 
contents to the clients. 

[88] Meanwhile, each of the DRM smart clients of the digital information 
appliances containing the client keys 440 can periodically request the 
verification of usefulness of a currently assigned client key 400 from the proxy 
manager 300 while a multimedia content service is provided. Through such 
periodic verification, the proxy manager 300 monitors the participation and 
withdrawal states of the clients at any time, arid reflects the monitored results 
on management policies for the group key 350, thus increasing security and 
efficiency of the private information network. 

[89] Fig. 7 is a flowchart showing the operation between the proxy manager 
300 and the DRM server group 100 according to the present invention. 
[90] First, the media center or set-top box receives an encrypted multimedia 
content package from the DRM server group 100 in response to a user's 
request for non-free multimedia contents at step SIO. 
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[91] Meanwhile, the media center or set-top box checks whether a proxy 
manager 300, corresponding to a DRM solution of the received multimedia 
content package, is installed in the media center or set-top box and whether a 
proxy for a corresponding DRM server group is generated, and installs a proxy 
manager 300 corresponding to the DRM server group if the corresponding 
proxy manager 300 is not installed at step S20. 

[92] Thereafter, the proxy manager 300 performs initialization for a non- 
free multimedia content service with the DRM server group 100 and requests a 
license for sharing multimedia contents among wired/wireless information 
appliances in the private information network from the DRM server group 100 
using the platform authentication unit 310 of the proxy manager 300 at step 
S30. 

[93] Whether the license is approved is determined according to business 
policies of the DRM server group 100. When the license is approved at step 
S40, the content conversion unit 320 of the proxy manager 300 decrypts the 
multimedia content package using the content service session key 340 at step 
S50. The content conversion unit 320 of the proxy manager 300 converts the 
decrypted content package again into multimedia contents having a format 
suitable for clients in the private information network. As described above, 
the converted multimedia contents may be single-format multimedia contents 
(for example, MPEG) previously designated in the private information 
network. 
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[94] Meanwhile, the converted multimedia contents can be encrypted in a 
suitable format by the content conversion unit 320 and transmitted to each of 
the DRM smart clients 400 at step S60. In order to perform the encryption, an 
encryption technique, such as the PKI, can be used. In this case, the above- 
described platform authentication unit 310 generates and manages certificates 
for authenticating the wired/wireless digital information appliances and 
encryption keys. 

[95] Thereafter, the license translation unit 330 translates authority 
information defined by the DRM server group, that is, a license, into a license 
having a format suitable for DRM smart clients 400 of the registered 
wired/wireless digital information appliances. As described above, the 
translated license may be a license, authority of which (for example, the 
number of uses, use time, etc.) is converted to be suitable for the clients 
registered on the private information network, for example, electrical home 
appliances, Web pads, PDAs or digital TVs. The license can be encrypted in a 
suitable format and transmitted to each of the DRM smart clients 400, similar 
to the multimedia contents, at step S70. 

[96] As described, in order to encrypt the multimedia contents and the 
license, an encryption technique, such as the PKI, can be used. In this case, 
both the content conversion unit 320 and the license translation unit 330 can 
perform the encryption using the group key 440 of the private information 
network. 
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[97] Thereafter, the report/billing unit (not shown) of the proxy manager 
300 collects information of multimedia content usage details of the 
wired/wireless digital information appliances of the private information 
network and other information and reports the collected information to the 
DRM server group 100 at step S80. 

[98] Fig. 8 is a flowchart showing the operation between the proxy manager 
and the DRM smart client according to the present invention. 
[99] First, the DRM smart client 400 of each of the wired/wireless digital 
information appliances performs authentication and access control of the 
wired/wireless digital information appliance with respect to the platform 
authentication unit 310 of the proxy manager 300 through the authentication 
and access control unit 410 before a multimedia content service is requested at 
steps 100. 

[100] That is, the registration of wired/wireless digital information 
appliances, the issue of certificates thereof, and the assignment of client keys 
are performed through the platform authentication unit 310 of the proxy 
manager 300 before or after a user's request for a non-free multimedia service. 
At this time, the DRM smart client 400 acquires the client key 440, and checks 
initial registration information and execution time information with respect to 
previously registered appliances at step S200. 

[101] After that, the DRM smart client 400 receives non-free multimedia 
contents, which are converted and encrypted by the content conversion unit 
320 of the proxy manager 300. If the multimedia contents are encrypted and 
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transmitted, for example, if an encryption technique, such as the PKI, is 
applied, the content decryption unit 420 of the DRM smart client 400 decrypts 
and executes the encrypted multimedia contents using the client key 440 
received from the proxy manager 300 after registration at step S300. 
[102] Meanwhile, when the license translated and encrypted by the license 
translation unit 330 of the proxy manager 300 is received, the rights 
management unit 430 of the DRM smart client 400 decrypts the encrypted 
license using the client key 440 received from the proxy manager 300 after 
registration, and checks whether the multimedia contents are executed to be 
suitable for the decrypted license, if the license is encrypted and transmitted to 
the DRM smart client 400, for example, if an encryption technique, such as the 
PKI, is applied, at step S400. 

[103] Thereafter, the DRM smart client 400 reports multimedia content 
usage details of the client of the private information network to the proxy 
manager 300 at step S500. 

[104] Although the exemplary embodiments of the present invention have 
been disclosed for illustrative purposes, those skilled in the art will appreciate 
that various modifications, additions and substitutions are possible, without 
departing from the scope and spirit of the invention. For example, the above- 
described proxy managers and the DRM smart clients can be implemented by 
software as well as hardware within the scope not departing from the technical 
spirit of the present invention, and, alternatively, only a part of them can be 
implemented by software. Meanwhile, the above embodiments are described 
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using a private information network as an example. However, the present 
invention can be applied to all intranets comprised of a plurality of clients, and 
it should be noted that the addition and modification of essential components 
according to the aspects or characteristics of respective intranets also belong to 
the technical scope of the present invention. 

[105] As described above, the present invention provides a system and 
method for managing multimedia contents in an intranet, which has the 
following advantages. 

[106] First, in the present invention, clients of the intranet, executing various 
multimedia contents, can operate independendy of DRM server groups, and 
the type of programs installed in the clients to execute multimedia contents 
can be unified or reduced, thus reducing the overload of the clients. 
[107] Second, since the overload of the clients can be reduced, a 
conventional DRM system can be applied even to an intranet including clients 
having low computing abilities. 

[108] Third, through a dynamic key management method, non-free 
multimedia contents and licenses can be stably executed or managed even in 
an intranet in which a client turnover rate according to the frequent 
participation and withdrawal of clients is high. 
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